CVE-2014-6552

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

CVE-2014-6553

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Admin Console...

CVE-2014-6552

Technical details for CVE-2014-6552 are not publicly available in the provided documents; monitor for updates as no affected product/version specifics or exploit information are disclosed here.

CVE-2014-6554

Oracle Fusion Middleware's Oracle Access Manager Admin Console (11.1.2.1/11.1.2.2) is affected by an unspecified vulnerability (CVE-2014-6554) that could allow remote authenticated users to affect confidentiality and integrity via unknown vectors. The connected sources provide limited technical d...

CVE-2014-6554

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Admin Console...

CVE-2014-6462

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

CVE-2014-6462

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

CVE-2014-6553: Undefined Security Weakness

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Admin Console...

CVE-2014-6552: Undefined Security Weakness

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

PT-2014-7285

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 11.1.1.5, 11.1.1.7, 11.1.2.1, 11.1.2.2 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Admin Console. Recommendations For...

PT-2014-7286

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.5 through 11.1.1.7 Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors related to the Admin Console. Recommendations For versions...

PT-2014-7287

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.2.1 through 11.1.2.2 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to the Admin Console. Recommendations For...

PT-2014-7230

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 11.1.2.1 through 11.1.2.2 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Admin Console. Recommendations For versions 11.1.2.1...

CVE-2014-6554: Undefined Security Weakness

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Admin Console...

CVE-2014-6462: Undefined Security Weakness

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

GetSimple CMS 3.3.1 - Cross-Site Scripting

PoC for XSS bugs in the admin console of GetSimple CMS 3.3.1 CVE-2014-1603 by Pedro Ribeiro [email protected] from Agile Information Security Disclosure: 12/05/2014 / Last updated: 12/10/2014 Timeline: 04/11/2013 - Found bugs, produced proof of concept. 05/11/2013 - Communicated to the developer,...

CVE-2014-4802

The Saved Search Admin component in the Process Admin Console in IBM Business Process Manager BPM 8.0 through 8.5.5 does not properly restrict task and instance listings in result sets, which allows remote authenticated users to bypass authorization checks and obtain sensitive information by...

CVE-2014-4802

IBM BPM Saved Search Admin in Process Admin Console (BPM 8.0–8.5.5) suffers an authorization vulnerability: authenticated users can obtain unfiltered result sets from saved searches, potentially exposing tasks and instances that they are not permitted to see. The weakness arises in the Saved Sear...

PT-2014-6124

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager BPM versions 8.0 through 8.5.5 Description The issue concerns the Saved Search Admin component in the Process Admin Console, which fails to properly restrict task and instance listings in result sets. This allows...